GCP MCP

Instructions

    Revoke Google Cloud credentials.
    
    Returns:
        Status message indicating whether the credentials were revoked
    

Implementation Reference

• src/gcp_mcp/gcp_modules/auth/tools.py:216-247 (handler)

  The core handler function for the 'auth_revoke' tool. It attempts to revoke active Google Cloud credentials using google.auth and removes the application default credentials (ADC) file.

  def auth_revoke() -> str:
      """
      Revoke Google Cloud credentials.
      
      Returns:
          Status message indicating whether the credentials were revoked
      """
      try:
          import google.auth
          from google.auth.transport.requests import Request
          
          # Check if we have application default credentials
          try:
              credentials, _ = google.auth.default()
              
              # If credentials have a revoke method, use it
              if hasattr(credentials, 'revoke'):
                  credentials.revoke(Request())
              
              # Remove the application default credentials file
              adc_path = _get_adc_path()
              if os.path.exists(adc_path):
                  os.remove(adc_path)
                  return "Application default credentials have been revoked and removed."
              else:
                  return "No application default credentials file found to remove."
          
          except Exception as e:
              return f"No active credentials found or failed to revoke: {str(e)}"
              
      except Exception as e:
          return f"Error revoking credentials: {str(e)}"

• src/gcp_mcp/server.py:30-30 (registration)

  Registers all authentication tools, including 'auth_revoke', with the MCP server by calling the auth module's register_tools function.

  auth_tools.register_tools(mcp)

• src/gcp_mcp/gcp_modules/auth/tools.py:359-365 (helper)

  Helper function used by auth_revoke to determine the path to the application default credentials file for removal.

  def _get_adc_path() -> str:
      """Get the path to the application default credentials file."""
      # Standard ADC paths by platform
      if os.name == 'nt':  # Windows
          return os.path.join(os.environ.get('APPDATA', ''), 'gcloud', 'application_default_credentials.json')
      else:  # Linux/Mac
          return os.path.expanduser('~/.config/gcloud/application_default_credentials.json')

• src/gcp_mcp/server.py:16-16 (registration)

  Imports the auth tools module, enabling registration of auth_revoke tool.

  from .gcp_modules.auth import tools as auth_tools